CVE-2005-2478

Published: Aug 5, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.

Affected (1)

Products: Silver Scripts: Silvernews

Silver Scripts

1 product

Silvernews

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Silver Scripts Silvernews	Version 2.0.3

References (14)

http://marc.info/?l=bugtraq&m=112309780321088&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16315

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1014622

Source: cve@mitre.org

http://www.osvdb.org/18517

Source: cve@mitre.org

http://www.rgod.altervista.org/silvernews.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/14466

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/21688

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112309780321088&w=2